
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3e3f981-14ec-3a69-b431-be9069dd0548.roa
File: b3e3f981-14ec-3a69-b431-be9069dd0548.roa (raw, json)
Hash identifier: yiH7BzY6sMBSv7phxxSv+eu5/0tYoHBsvCNRPk42Pj8=
Subject key identifier: 9D:4F:71:C9:74:BA:54:65:45:6A:8D:41:FF:01:0C:CB:34:E4:A0:D9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE580052608B7D3B20330AF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3e3f981-14ec-3a69-b431-be9069dd0548.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 67.173.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:00:52:60:8b:7d:3b:20:33:0a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=cd401347-c459-4c25-b999-d5fb514d7253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:3a:e6:81:60:20:81:5e:05:04:6a:4b:5a:
dc:9f:56:d0:af:ae:c5:bb:e1:d5:97:03:aa:8b:f6:
66:16:55:f8:94:0f:0f:d9:35:97:a9:cb:fa:c9:db:
89:d8:81:eb:b8:5d:9c:44:84:05:5c:24:46:ef:90:
82:e1:eb:9f:fe:a4:fb:d4:04:90:a4:52:b9:3e:cc:
66:e7:9a:6a:1c:67:23:46:c2:3c:ca:8e:e3:61:20:
c8:c1:10:a6:5d:0b:58:2b:b6:6b:4f:39:57:a9:bd:
97:f1:58:ee:4a:3d:6e:25:27:8b:18:ca:e6:91:08:
a0:dc:a9:eb:fe:4c:a0:e1:e3:99:7c:fd:38:9c:69:
67:b0:c0:fe:36:11:57:65:11:eb:63:c9:ee:58:98:
04:ed:82:f0:19:d5:b2:ba:1f:fc:3c:c5:49:73:4e:
fc:b8:60:60:b2:23:4b:e1:6c:e7:f8:47:3d:d8:5e:
63:4b:c2:9b:7c:ce:6d:22:fd:3a:1d:c5:a7:99:74:
7e:72:dc:9f:f6:93:d6:16:f1:74:40:d1:90:49:23:
0f:4c:a1:90:2f:65:d4:0d:a3:7d:8e:e2:11:bb:df:
02:55:ec:24:e6:c8:03:5a:7e:97:65:e9:8a:62:ec:
0d:36:b8:7a:01:2b:fa:bb:23:8d:23:48:f7:c6:0b:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4F:71:C9:74:BA:54:65:45:6A:8D:41:FF:01:0C:CB:34:E4:A0:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3e3f981-14ec-3a69-b431-be9069dd0548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.173.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:cc:51:2c:f4:52:2a:3c:00:16:55:e3:c8:21:99:5a:72:4e:
e7:53:ce:27:bb:fb:da:05:bc:6c:d1:7a:b2:e5:a3:d7:3e:77:
a0:45:81:b9:5b:ae:f7:36:d7:8b:79:91:c3:40:b1:44:07:ac:
05:93:21:1b:27:d4:56:09:de:9a:85:ac:b0:6e:bb:ac:f8:74:
47:8f:ab:c2:6c:8a:9a:a2:07:8d:4a:2e:42:d4:2c:d3:d2:c9:
f6:24:a5:38:57:0e:c3:5b:64:f9:32:30:d9:ae:3d:bc:65:ff:
84:89:3f:d2:c7:3e:a5:df:6f:7d:0f:01:7d:5e:cd:57:30:1e:
82:ee:8c:c6:fb:fb:ea:01:e8:a1:ae:6f:12:74:ef:e9:16:c3:
a7:86:e8:39:26:e6:a2:ff:17:d9:4b:45:5b:32:aa:6a:9b:bc:
de:67:50:fc:f5:6d:67:84:65:9b:48:58:9b:28:8d:9f:e5:2b:
07:d6:93:cb:4a:0e:c3:20:e9:5b:a0:65:fd:08:02:92:e8:cb:
29:62:f7:e7:1d:c2:27:29:53:a5:ee:b0:60:7a:6d:2e:70:8e:
89:a1:ca:e8:87:62:ef:bd:48:fb:7f:60:eb:2e:e5:b1:54:dd:
77:d5:fe:2c:b6:42:0e:75:b9:9b:34:1b:50:5f:df:be:24:1b:
d8:70:4b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:55:07 2026 by rpki-client